[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsjZtZkKGsD_nCgWKq5KxsH1N5a4TBVdOi07zJc2Og_E":3},{"article":4,"iocs":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":30},"25f12845-e28f-491e-85b3-5a6d4c05b36c","An #adware campaign involving 50+ Chrome extensions (disguised as live wallpapers) has hit ~30K u...","an-adware-campaign-involving-50-chrome-extensions-disguised-as-live-wallpapers-h-5bc5f7","An #adware campaign involving 50+ Chrome extensions (disguised as live wallpapers) has hit ~30K users. Spread across three publisher accounts, the attackers are pushing remote HTML to 40+ extensions and wiping IndexedDB on install and startup. Details at https:\u002F\u002Ft.co\u002FyihnkqJ3tj https:\u002F\u002Ft.co\u002Fu2V8UmLzWM","A large-scale adware campaign exploited over 50 Chrome extensions masquerading as live wallpapers across three publisher accounts to target approximately 30,000 users. The malicious extensions push remote HTML content and wipe IndexedDB data on installation and startup, suggesting data exfiltration or credential theft. The campaign highlights ongoing risks in the Chrome Web Store's extension ecosystem despite platform security measures.","50+ Chrome extensions disguised as live wallpapers used for adware campaign affecting 30K users.",null,"https:\u002F\u002Fx.com\u002FUnit42_Intel\u002Fstatus\u002F2061853927566381499","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHJ0tKi9XoAAYRGv.jpg","2026-06-02T16:54:18+00:00","2026-06-02T17:00:07.202602+00:00",8,[18,21,24],{"name":19,"type":20},"Chrome","product",{"name":22,"type":23},"Chrome Web Store","technology",{"name":25,"type":23},"IndexedDB","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":26,"icon":11,"name":28,"slug":29},"Malware","malware",[31,36],{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":29,"value":43,"context":44},"Chrome adware extensions (50+ variants)","Disguised as live wallpapers; spread across three publisher accounts; push remote HTML and wipe IndexedDB"]